Skip to content
OpenAdvisories
High · 7.8 CVE-2023-27938 EUVD-2023-31664GHSA-wppr-wxf6-xw36

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in GarageBand for macOS 10.4.8. Parsing a mal…

Published May 8, 2023 · Updated Jan 29, 2025 · Assigned by apple

Description

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in GarageBand for macOS 10.4.8. Parsing a maliciously crafted MIDI file may lead to an unexpected application termination or arbitrary code execution.

Affected products

VendorProductAffectedFixed
Apple macOS unspecified – < 10.4 10.4

References